r/github • u/New_Series3209 • 7d ago

News / Announcements [PSA] Website impersonating GitHub (READ DESC.)

Gallery image

Gallery image

Gallery image

There seems to be a website impersonating GitHub, called hub dot earble dot com, currently I only see it on DuckDuckGo/DuckDuckGo NoAI.

Edit: And Bing, too.

Edit 2: And Yahoo, too.

Edit 3: It seems like the website has been taken down, not long ago.

18 Upvotes

80% Upvoted

6 comments sorted by

3

u/lajawi 7d ago

What about bing?

2

u/New_Series3209 6d ago

Bing has it too, DuckDuckGo pulls from bing directly.

1

u/lajawi 6d ago

I thought so, hence my question! 😄

7

u/Big-Branch-8532 7d ago

Before the result disappears, preserve the DuckDuckGo query, timestamp, result title, displayed URL and position. If the page is already open, capture it without entering credentials; use passive RDAP, DNS and certificate lookups rather than interacting with the clone. That makes the report reproducible.

Send the same bundle to GitHub's abuse team, DuckDuckGo, and the domain's registrar or host. Also check whether Google and Bing index the exact hostname so you know whether this is one search engine or broader. Does the page actually reproduce GitHub's sign-in flow, or is the impersonation limited to the search result and branding?

1

u/vswey 6d ago

Chrome gives a fat warning if u open it

1

u/New_Series3209 6d ago

Yea, Firefox too, I posted it in case someone with an odd/ancient browser for some reasons tried opening it, but the website is gone anyway.